Lucene search
K

475 matches found

Cvelist
Cvelist
added 2025/11/06 9:7 p.m.9 views

CVE-2025-12790 Rubygem-mqtt: rubygem-mqtt hostname validation

A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle MITM attack...

7.4CVSS0.00343EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/06 9:7 p.m.2 views

CVE-2025-12790 Rubygem-mqtt: rubygem-mqtt hostname validation

A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle MITM attack...

7.4CVSS6.2AI score0.00343EPSS
Exploits0References3
OSV
OSV
added 2025/11/06 9:7 p.m.4 views

CVE-2025-12790 Rubygem-mqtt: rubygem-mqtt hostname validation

A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle MITM attack...

7.4CVSS7AI score0.00343EPSS
Exploits0References7
CVE
CVE
added 2025/11/06 9:7 p.m.20 views

CVE-2025-12790

Rubygem MQTT is affected by CVE-2025-12790 due to lack of hostname validation in the MQTT library, enabling potential MITM attacks. The issue is described across multiple connected sources as a vulnerability in the Rubygem MQTT package where hostname verification is not performed by default, allo...

7.4CVSS6.2AI score0.00343EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/11/06 9:7 p.m.5 views

CVE-2025-12790

A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle MITM attack. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

7.4CVSS6.1AI score0.00343EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.5 views

MQTT 安全漏洞

MQTT Message Queuing Telemetry Transport is an ISO standard ISO/IEC PRF 20922 publishing/subscribing paradigm-based messaging protocol that operates on the TCP/IP family of protocols and is designed for use in situations where hardware performance is low on remote devices and network conditions a...

7.4CVSS6.4AI score0.00343EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.5 views

PT-2025-45377

Name of the Vulnerable Software and Affected Versions Rubygem MQTT affected versions not specified Description The Rubygem MQTT package did not have hostname validation enabled by default, which could allow for a Man-in-the-Middle MITM attack. This means a malicious actor could potentially...

7.4CVSS6.5AI score0.00343EPSS
Exploits0References12
RubySec
RubySec
added 2025/11/06 12:0 a.m.10 views

MQTT does not validate hostnames

A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle MITM attack...

7.4CVSS6.6AI score0.00343EPSS
Exploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2025/10/31 1:5 a.m.4 views

Insufficient validation of bracketed IPv6 hostnames in net/url

...

5.3CVSS7AI score0.00443EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2012-5669

Malware in sbrugna...

5.8CVSS6.4AI score0.0057EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-26613

Malware in sbrugna...

6.1CVSS6.3AI score0.01788EPSS
Exploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2012-5945

Malware in sbrugna...

7.5CVSS7.5AI score0.01312EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-9529

Malware in sbrugna...

9CVSS6.2AI score0.04916EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-0687

Malware in sbrugna...

5.9CVSS5.7AI score0.00884EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2010-0531

Malware in sbrugna...

7.8CVSS4.5AI score0.01736EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-20727

Malware in sbrugna...

9.8CVSS9.3AI score0.00963EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-1964

Malware in sbrugna...

5.9CVSS6.6AI score0.02815EPSS
Exploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-0424

Malware in sbrugna...

9CVSS8.7AI score0.00771EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-0775

Malware in sbrugna...

5.9CVSS5.7AI score0.00862EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-7724

Malware in sbrugna...

9.8CVSS9.5AI score0.01115EPSS
Exploits0References4
Rows per page
Query Builder